QwikSec

Security Database

CVE

CWE

Training

CVE-2015-6830

Published: Sep 14, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers to bypass a multiple-reCaptcha protection mechanism against brute-force credential guessing by providing a correct response to a single reCaptcha.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_DEBIAN

https://www.phpmyadmin.net/security/PMASA-2015-4/

x_refsource_CONFIRM

FEDORA-2015-15385

vendor-advisory

x_refsource_FEDORA

FEDORA-2015-15384

vendor-advisory

x_refsource_FEDORA

https://github.com/phpmyadmin/phpmyadmin/commit/785f4e2711848eb8945894199d5870253a88584e

x_refsource_CONFIRM

FEDORA-2015-15386

vendor-advisory

x_refsource_FEDORA

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.